CI AIM I ISTING 

Please amfinri the Claims as follows- 

This listing of claims will replace all prior versions, and listing, of claims in the 
application: 

Applicant has made a good faith effort to list each and every prior claim, including any amendments or 
changes thereto (or status thereof) in this "Listing" section, however, should there be any discrepancy 
between the previous version of a claim (or status thereof) and the listing not explicitly amended, 
canceled or otherwise changed by this amendment, only the previous version (and status thereof) should 
be referred to as the intent of the Applicant. 

I isting of the Claims - 

1. (Amended) A computer-implemented method for securely delivering 
a document from a sender to a recipient, the method comprising an 
operations center (OC) performing the steps of: 

associating — fehe — sender — with — a — sender — public — key — from — a 
sender public - private — key pair; — using the — sender public — key, — ift 
con junction — with — fehe — sender — using — fehe — sender — private — key, — fee 
authenticate the sender; 

establishing — a — first — secure — connection — between — feke — sender 
and the OC; 

associating — the — recipient — with — a — recipient public — key — from 
a recipient public - private key pair; — a**et 

providing — ef*e — from — a — group — comprising — a — recipient — public 
-key — a-ftd — a-R — escrow — encryption — key — fee — fehe — sender — fee — secure — a 
delivery , — the delivery comprising at least the document 

registering the sender in a sender registration record and 
associating a sender public-private key pair for the sender with 
the sender; 
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receiving a communication encrypted by the sender using a 
sender private key selected from said sender public-private key 

recalling a sender public key selected from said sender 
public-private key pair from said sender registration record; 

authenticating the sender by using the recalled sender 
public key to decrypt the communication sent from the sender; 

establishing a first secure connection between the sender 
and the PC in response to authenticating the sender; 

associating the recipient with a recipient public key from 
a recipient public-private key pair, wherein said recipient 
public-private key pair is distinct and separate from said 
sender public-private key; 

storing an escrow encryption key separate from said 
recipient public key and from said sender public key for 
selectively encrypting communications to the recipient in place 
of the recipient escrow encryption key; and 

encrypting a delivery to the recipient using the recipient 
public key if said recipient public key is stored in the PC and 
encrypting the delivery to the recipient using the escrow 
encryption key when said recipient public key is not stored in 
the PC, and subsequently sending the encrypted delivery to the 
recipient after encryption of the delivery by one from a group 
comprising a recipient public key and an escrow encryption key, 
the delivery comprising at least the document . 
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2. (Amended) The method of claim 1 further comprising the 
OC performing the steps of: 

receiving at least a portion of the delivery from the 
sender via the first secure connection; 

storing the at least a portion of the delivery; 

using the recipient public key, in conjunction with the 
recipient using the recipient private key, to authenticate the 
recipients- 
establishing a second secure connection between the 
recipient and the OC; and 

transmitting the at least a portion of the delivery to the 
recipient via the second reliable secure connection. 

3. (Amended) The method of claim 2 further comprising, in 
response to the recipient receiving the at least a portion 
of the delivery, the OC performing one from a group of steps 
comprising: 

notifying the sender to form a second secure connection to 
the recipient to transmit the remainder of the delivery; and 

notifying the recipient to form a second secure connection 
to the sender to transmit the remainder of the delivery. 
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4. (Original) The method of claim 3 further comprising the 
OC performing one from a group of steps comprising: 

receiving a first acknowledgement from the sender that the 
remainder of the delivery was 

transmitted to the recipient; and 

receiving a second acknowledgement from the recipient that 
the remainder of the delivery was received by the recipient. 

5. (Original) The method of claim 2 wherein each of the 
first and second secure connections comprises one from a group 
comprising a direct line, a virtual private network connection, 
and a Secure Socket Layer connection. 

6. (Original) The method of claim 2 wherein at least one of 
the first and second secure connections comprises a virtual 
private network connection formed by using a VPN encryption key 
at a layer selected from a group comprising an application 
layer, a presentation layer, and a session layer of the Open 
Systems Interconnect reference model. 

7. (Original) The method of claim 2 wherein at least one of 
the first and second secure connections comprises a virtual 
private network connection formed by using at least one key from 
a group comprising the sender public key, the recipient public 
key, an OC public key, and a session key. 
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8. (Amended) The method of claim 3 wherein the second 
secure connection between the sender and the recipient comprises 
one from a group comprising a direct line, a virtual private 
network connection, and a Secure Socket Layer connection. 

9. (Amended) The method of claim 3 wherein the second 
secure connection between the sender and the recipient comprises 
a virtual private network connection formed by using a VPN 
encryption key at a layer selected from a group comprising an 
application layer, a presentation layer, and a session layer of 
the Open Systems Interconnect reference model. 

10. (Amended) The method of claim 3 wherein the second 
secure connection comprises a virtual private network connection 
formed by using at least one key from a group comprising the 
sender public key, the recipient public key, and a session key. 

11. (Original) The method of claim 2 wherein the delivery 
further comprises at least one from the group comprising: 

a message digest comprising one of a group of a hash of the 
document, a hash of the document encrypted with a document 
encryption key, a hash of the document encrypted with the 
encryption key, and a hash of the document encrypted with the 
sender private key from the sender public-private key pair; and 
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a digital signature signed by the sender private key from 
the sender public-private key pair. 

12. (Original) The method of claim 11 further comprising 
the OC performing the steps of: 

storing at least one of the message digest and the digital 
signature; and 

time-stamping and recording an acknowledgement from the 
recipient that the at least a portion of the delivery was 
received . 

13. (Original) The method of claim 2 further comprising the 
OC performing the step of: 

providing a delivery notification to the recipient that the 
OC is storing the at least a portion of the delivery for the 
recipient . 

14. (Original) The method of claim 2 further comprising the 
OC performing the step of providing a notification to the 
sender of an event selected from a group comprising: 

a failure of the OC to transmit the at least a portion of 
the delivery to the recipient within a specified time period; 
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a failure of the OC to locate a valid public key for the 
recipient; transmission of the at least a portion of the 
delivery to the recipient; 

receipt of an acknowledgment from the recipient that the at 
least a portion of the delivery was received; 

receipt of an acknowledgment from the recipient that the 
delivery was received; receipt of an acknowledgement from the 
recipient that the document was successfully decrypted; and 

a failure of the OC to transmit the at least a portion of 
the delivery to the recipient because the recipient is unable to 
access the recipient private key. 

15. (Original) The method of claim 1 further comprising the 
OC performing the steps of: 

storing the sender public key and the recipient public key 
in a database; and 

providing the sender and the recipient access to the 
database . 

16. (Original) The method of claim 15 further comprising 
the OC performing at least one of the steps of: 

revoking the sender public key; 

revoking the recipient public key; and 
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authorizing the generation of a new public-private key pair 
for at least one of a group comprising the sender, the 
recipient, and a new user. 

17. (Original) The method of claim 1 further comprising the 
OC facilitating a direct and secure connection between the 
sender and the recipient by the OC performing the steps of: 

using the recipient public key, in conjunction with the 
recipient using the recipient private key, to authenticate the 
recipient; 

receiving a request from the sender to transmit the 
delivery directly to the recipient; and providing one from a 
group comprising: 

a notice to the sender that the recipient is available to 
directly accept the delivery; and 

a notice to the recipient that the sender is available to 
transmit the delivery directly to the recipient. 

18. (Original) The method of claim 17 further comprising, 
in response to the sender and the recipient establishing a 
direct and secure connection and the sender transmitting the 
delivery to the recipient via the direct and secure connection, 
the OC performing the steps of: 

receiving a sender acknowledgement from the sender that the 
delivery was transmitted to the recipient; and 

09/887,157 
Page 10 

i 



receiving a recipient acknowledgement from the recipient 
that the delivery was received by the recipient. 

19. (Original) The method of claim 17 wherein the direct 
and secure connection is a virtual private network connection 
formed by using a VPN encryption key at a layer selected from a 
group comprising an application layer, a presentation layer, and 
a session layer of the Open Systems Interconnect reference 
model . 

20. (Original) The method of claim 17 wherein the direct 
and secure connection comprises one from a group comprising a 
direct line, a virtual private network connection, and a Secure 
Socket Layer connection. 

21. (Original) The method of claim 17 wherein the direct 
and secure connection is a virtual private network connection 
formed by using at least one key from a group comprising the 
sender public key, the recipient public key, and a session key. 

22. (Original) The method of claim 17 wherein the delivery 
further comprises at least one from the group comprising: 

a message digest comprising one of a group of a hash of the 
document, a hash of the document encrypted with a document 
encryption key, a hash of the document encrypted with the 
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encryption key, and a hash of the document encrypted with a 
private key of the sender; and 

a digital signature signed by the sender private key from 
the sender public-private key pair. 

23. (Original) The method of claim 18 further comprising 
the OC performing the step of: 

time-stamping and recording the sender acknowledgement and 
the recipient acknowledgement. 

24. (Amended) A system for securely delivering a document 
from a sender to a recipient, the system comprising an 
operations center (OC) comprising: 

a key manager module for associating the sender with a 
first sender public key from a sender public-private key pair 
and for associating the recipient with a second recipient public 
key from a recipient public-private key pair , where said sender 
public key and said receiver public key are not the same key ; 

a directory interface, coupled to the key manager module 
and to a public key database and an escrow key manager, for 
searching and returning — e**e — key — from a — group — ef — keys — comprising 
a — rccipicnt the public key and an — escrow — encryption — key, database 
upon request from the sender for an encryption key; 

key and for returning one key, where said one key is said 
recipient public key when a recipient public key is stored in 
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the public key database, and said one key is an escrow 
encryption key only when said recipient public key is not 
returned from the public key database; 

an authentication module, coupled to the key manager 
module, for using the sender public key, in conjunction with the 
sender using the sender private key, to authenticate the sender; 

a secure connection module, coupled to the authentication 
module, for establishing a first secure connection between the 
sender and the OC; and 

a messaging module, coupled to the secure connection 
module, for receiving a request from the sender for an 
encryption key to secure a delivery, the delivery comprising at 
least the document, and for transmitting to the sender one from 
a group comprising the recipient public key and the escrow 
encryption key . 

key, where said escrow encryption key is used only to 
encrypt documents to be sent to the recipient. 

25. (Original) The system of claim 24 further comprising: 

the authentication module further adapted for using the 
recipient public key, in conjunction with the recipient using 
the recipient private key, to authenticate the recipient; 

the secure connection module further adapted for 
establishing a second secure connection between the recipient 
and the OC; 
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the messaging module further adapted for receiving at least 
a portion of the delivery from the sender via the first secure 
connection and for transmitting the at least a portion of the 
delivery to the recipient via the second reliable connection; 
and 

a storage area, including a computer-readable medium, 
coupled to the messaging module, for storing the at least a 
portion of the delivery. 

26. (Original) The system of claim 25 further comprising: 

the messaging module further adapted for performing, in 
response to the recipient receiving the at least a portion of 
the delivery, one from a group of steps comprising: 

notifying the sender to form a secure connection to the 
recipient to transmit the remainder of the delivery; and 

notifying the recipient to form a secure connection to the 
sender to transmit the remainder of the delivery. 

27. (Original) The system of claim 26 further comprising: 

a tracking module, coupled to the messaging module, for 
receiving a first acknowledgement from the sender that the 
remainder of the delivery was transmitted to the recipient, and 
for receiving a second acknowledgement from the recipient that 
the remainder of the delivery was received by the recipient. 
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28. (Original) The system of claim 25 wherein each of the 
first and second secure connections comprises one from a group 
comprising a direct line, a virtual private network connection, 
and a Secure Socket Layer connection. 



29. (Original) The system of claim 25 wherein at least one 
of the first and second secure connections comprises a virtual 
private network connection formed by using a VPN encryption key 
at a layer selected from a group comprising an application 
layer, a presentation layer, and a session layer of the Open 
Systems Interconnect reference model. 



30. (Original) The system of claim 25 wherein at least one 
of the first and second secure connections comprises a virtual 
private network connection formed by using at least one key from 
a group comprising the sender public key, the recipient public 
key, an OC public key, and a session key. 



31. (Original) The system of claim 26 wherein the secure 
connection comprises a virtual private network connection formed 
by using at least one key from a group comprising the sender 
public key, the recipient public key, and a session key. 
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32. (Original) The system of claim 25 wherein the delivery 
further comprises at least one from the group comprising: 

a message digest comprising one of a group of a hash of the 
document, a hash of the document encrypted with a document 
encryption key, a hash of the document encrypted with the 
encryption key, and a hash of the document encrypted with the 
sender private key from the sender public-private key pair; and 

a digital signature signed by the sender private key from 
the sender public-private key pair. 

33. (Original) The system of claim 32 further comprising: 

a tracking module for recording at least one from the group 
comprising the message digest and the digital signature, and for 
time-stamping and recording an acknowledgement from the 
recipient that the at least a portion of the delivery was 
received . 

34. (Original) The system of claim 25 further comprising: 

the messaging module further adapted for providing a 
delivery notification to the recipient that the OC is storing 
the at least a portion of the delivery for the recipient. 

35. (Original) The system of claim 25 further comprising: 
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the messaging module further adapted for providing a 
notification to the sender of an event selected from a group 
comprising : 

a failure of the OC to transmit the at least a portion of 
the delivery to the recipient within a specified time period; 

a failure of the OC to locate a valid public key for the 
recipient; 

transmission of the at least a portion of the delivery to 
the recipient; 

receipt of an acknowledgment from the recipient that the at 
least a portion of the delivery was received; 

receipt of an acknowledgment from the recipient that the 
delivery was received; receipt of an acknowledgement from the 
recipient that the document was successfully decrypted; and a 
failure of the OC to transmit the at least a portion of the 
delivery to the recipient because the recipient is unable to 
access the recipient private key. 

36. (Original) The system of claim 24 further comprising: 

the key manager module further adapted for providing the 
sender and the recipient access to the public key database. 

37. (Original) The system of claim 24 further comprising: 
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the key manager module further adapted for performing at 
least one of the steps of: 

revoking the sender public key; revoking the recipient 
public key; and 

authorizing the generation of a new public-private key pair 
for at least one of a group comprising the sender, the 
recipient, and a new user. 

38. (Original) The system of claim 24 further adapted to 
facilitate a direct and secure connection between the sender and 
the recipient, the system further comprising: 

the authentication module further adapted for using the 
recipient public key, in conjunction with the recipient using 
the recipient private key, to authenticate the recipient; 

the messaging module further adapted for receiving a 
request from the sender to transmit the delivery directly to the 
recipient, and for providing one from a group comprising: 

a notice to the sender that the recipient is available to 
directly accept the delivery; and 

a notice to the recipient that the sender is available to 
transmit the delivery directly to the recipient. 

39. (Original) The system of claim 38 further comprising: 
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the messaging module further adapted for receiving, in 
response to the sender and the recipient establishing a direct 
and secure connection and the sender transmitting the delivery 
to the recipient via the direct and secure connection: 

a sender acknowledgement from the sender that the delivery 
was transmitted to the recipient; and 

a recipient acknowledgement from the recipient that the 
delivery was received by the recipient. 

40. (Original) The system of claim 38 wherein the direct 
and secure connection comprises a virtual private network 
connection formed by using a VPN encryption key at a layer from 
a group comprising an application layer, a presentation layer, 
and a session layer of the Open Systems Interconnect reference 
model . 

41. (Original) The system of claim 38 wherein the direct 
and secure connection comprises one from a group comprising a 
direct line, a virtual private network connection, and a Secure 
Socket Layer connection. 

42. (Original) The system of claim 38 wherein the direct 
and secure connection comprises a virtual private network 
connection formed by using at least one key from a group 
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comprising the sender public key, the recipient public key, and 
a session key. 

43. (Original) The system of claim 38 wherein the delivery 
further comprises at least one from the group comprising: 

a message digest comprising one of a group of a hash of the 
document, a hash of the document encrypted with a document 
encryption key, a hash of the document encrypted with the 
encryption key, and a hash of the document encrypted with a 
private key of the sender; and 

a digital signature signed by the sender private key from 
the sender public-private key pair. 

44. (Original) The system of claim 39 further comprising: 

a tracking module for time-stamping and recording the 
sender acknowledgement and the recipient acknowledgement. 

45. (Original) In a computer-readable medium, a computer 
program product for an operations center (OC) facilitating 
secure delivery of a document from a sender to a recipient, the 
computer readable medium comprising program code adapted to 
perform the steps of: 

associating the sender with a sender public key from a 
sender public-private key pair; using the sender public key, in 
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conjunction with the sender using the sender private key, to 
authenticate the sender; 

establishing a first secure connection between the sender 
and the OC; 

associating the recipient with a recipient public key from 
a recipient public-private key pair; and 

providing one from a group comprising a recipient public 
key and an escrow encryption key to the sender to secure a 
delivery, the delivery comprising at least the document. 



46- (Original) The computer readable medium of claim 45 
further comprising program code adapted to perform the steps 
of: 

receiving at least a portion of the delivery from the 
sender via the first secure connection; storing the at least a 
portion of the delivery; 

using the recipient public key, in conjunction with the 
recipient using the recipient private key, to authenticate the 
recipient; 

establishing a second secure connection between the 
recipient and the OC; and transmitting the at least a portion of 
the delivery to the recipient via the second reliable 
connection . 
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47. (Original) The computer readable medium of claim 46 
further comprising program code adapted to perform, in response 
to the recipient receiving the at least a portion of the 
delivery, one from 

a group of steps comprising: 

notifying the sender to form a secure connection to the 
recipient to transmit the remainder of the delivery; and 

notifying the recipient to form a secure connection to the 
sender to transmit the remainder of the delivery, 

48. (Original) The computer readable medium of claim 47 
further comprising program code adapted to perform one from a 
group of steps comprising: 

receiving a first acknowledgement from the sender that the 
remainder of the delivery was transmitted to the recipient; and 

receiving a second acknowledgement from the recipient that 
the remainder of the delivery was received by the recipient. 

49. (Original) The computer readable medium of claim 46 
wherein each of the first and second secure connections 
comprises one from a group comprising a direct line, a virtual 
private network connection, and a Secure Socket Layer 
connection . 
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50. (Original) The computer readable medium of claim 4 6 
wherein at least one of the first and second secure connections 
comprises a virtual private network connection formed by using a 
VPN encryption key at a layer selected from a group comprising 
an application layer, a presentation layer, and a session layer 
of the Open Systems Interconnect reference model. 



51. (Original) The computer readable medium of claim 4 6 
wherein at least one of the first and second connections 
comprises a virtual private network connection formed by using 
at least one key from a group comprising the sender public key, 
the recipient public key, an OC public key, and a session key. 



52. (Original) The computer readable medium of claim 47 
wherein the secure connection between the sender and the 
recipient comprises one from a group comprising a direct line, a 
virtual private network connection, and a Secure Socket Layer 
connection. 



53. (Original) The computer readable medium of claim 47 
wherein the secure connection between the sender and the 
recipient comprises a virtual private network connection formed 
by using a VPN encryption key at a layer selected from a group 
comprising an application layer, a presentation layer, and a 
session layer of the Open Systems Interconnect reference model. 



09/887,157 
Page 23 



54. (Original) The computer readable medium of claim 47 
wherein the secure connection comprises a virtual private 
network connection formed by using at least one key from a group 
comprising the sender public key, the recipient public key, and 
a session key. 

55. (Original) The computer readable medium of claim 46 
wherein the delivery further comprises at least one from the 
group comprising: 

a message digest comprising one of a group of a hash of the 
document, a hash of the document encrypted with a document 
encryption key, a hash of the document encrypted with the 
encryption key, and a hash of the document encrypted with the 
sender private key from the sender public-private key pair; and 

a digital signature signed by the sender private key from 
the sender public-private key pair. 

56. (Original) The computer readable medium of claim 55 
further comprising program code adapted to perform the steps 
of: 

storing at least one of the message digest and the digital 
signature; and time-stamping and recording an acknowledgement 
from the recipient that the at least a portion of the delivery 
was received. 
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57. (Original) The computer readable medium of claim 46 
further comprising program code adapted to perform the step 
of: 

providing a delivery notification to the recipient that the 
OC is storing the at least a portion of the delivery for the 
recipient . 

58. (Original) The computer readable medium of claim 4 6 
further comprising program code adapted to perform the step of 
providing a notification to the sender of an event selected from 
a group comprising: 

a failure of the OC to transmit the at least a portion of 
the delivery to the recipient within a specified time period; 

a failure of the OC to locate a valid public key for the 
recipient; transmission of the at least a portion of the 
delivery to the recipient; 

receipt of an acknowledgment from the recipient that the at 
least a portion of the delivery was received; 

receipt of an acknowledgment from the recipient that the 
delivery was received; receipt of an acknowledgement from the 
recipient that the document was successfully decrypted; and 

a failure of the OC to transmit the at least a portion of 
the delivery to the recipient because the recipient is unable to 
access the recipient private key. 
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59. (Original) The computer readable medium of claim 45 
further comprising program code adapted to perform the steps 
of: 

storing the sender public key and the recipient public key 
in a database; and providing the sender and the recipient access 
to the database. 

60. (Original) The computer readable medium of claim 59 
further comprising program code adapted to perform at least 
one of the steps of: 

revoking the sender public key; revoking the recipient 
public key; and 

authorizing the generation of a new public-private key pair 
for at least one of a group comprising the sender, the 
recipient, and a new user. 

61. (Original) The computer readable medium of claim 45 
further comprising program code adapted to facilitate a direct 
and secure connection between the sender and the recipient by 
performing the steps of: 

using the recipient public key, in conjunction with the 
recipient using the recipient private key, to authenticate the 
recipient; 

receiving a request from the sender to transmit the deliver 
directly to the recipient; and 
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providing one from a group comprising: 

a notice to the sender that the recipient is available to 
directly accept the delivery; and 

a notice to the recipient that the sender is available to 
transmit the delivery directly to the recipient. 

62. (Original) The computer readable medium of claim 61 
further comprising program code adapted to perform the steps 
of: 

in response to the sender and the recipient establishing a 
direct and secure connection and the sender transmitting the 
delivery to the recipient via the direct and secure connection: 

receiving a sender acknowledgement from the sender that the 
delivery was transmitted to the recipient; and 

receiving a recipient acknowledgement from the recipient 
that the delivery was received by the recipient. 

63. (Original) The computer readable medium of claim 61 
wherein the direct and secure connection 

comprises a virtual private network connection formed by 
using a VPN encryption key at a layer selected from a group 
comprising an application layer, a presentation layer, and a 
session layer of the Open Systems Interconnect reference model. 
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64. (Original) The computer readable medium of claim 61 
wherein the direct and secure connection comprises one from a 
group comprising a direct line, a virtual private network 
connection, and a Secure Socket Layer connection. 

65. (Original) The computer readable medium of claim 64 
wherein the direct and secure connection 

comprises a virtual private network connection formed by 
using at least one key from a group comprising the sender public 
key, the recipient public key, and a session key. 

66. (Original) The computer readable medium of claim 61 
wherein the delivery further comprises at least one from the 
group comprising: 

a message digest comprising one of a group or a hash of the 
document, a hash of the document encrypted with a document 
encryption key, a hash of the document encrypted with the 
encryption key, and a hash of the document encrypted with a 
private key of the sender; and 

a digital signature signed by the sender private key from 
the sender public-private key pair. 
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67. (Original) The computer readable medium of claim 62 
further comprising program code adapted to perform the step of: 

time-stamping and recording the sender acknowledgement and 
the recipient acknowledgement. 
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